Sourcefire Network Sensor

• Event monitoring
• Event correlation & forensic analysis
• Systems awareness & security optimization
• Sensor management
• Asset/change management
• Policy distribution & enforcement

• Why a change occurred
• Whether or not an attack poses an actual threat to the target
• How to prioritize the response

Sourcefire MC produces a full end-to-end network security solution that allows users to leverage essential security data more effectively, reducing security costs and improving the effectives of the security administrators.

Ultra High Performance
Designed with enterprise deployments in mind, Sourcefire MC is the only data management solution that is delivered with a built-in high performance database capable of handling hundreds of millions of events for identification of long-term security trends while also allowing in-depth forensic analysis down to the individual packet level. The database is pre-installed, pre-configured and self maintaining, allowing administrators to focus on what is important – gaining an unprecedented level of network security awareness through real-time consolidation and analysis of every event identified within the ISM network grid.

From a single interface, event information from various Sourcefire Network Sensors and Real-time Network Awareness sensors can be aggregated into a holistic view of the network, providing analysts with the ability to correlate highly granular event data with the most up to date vulnerability information available. For the first time, security administrators are provided with the information they need to reduce threats, prevent attacks and respond to compromises.